`openssl`

Ecosystem:
cargo

Package URL:
pkg:cargo/openssl

Total PRs:
1,770 Dependabot PRs

Latest PR:
22 days ago

Unique Repositories:
1,160 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

`openssl` `X509StoreRef::objects` is unsound

GHSA-xphf-cx8h-7q9g MODERATE published over 2 years ago • updated 4 months ago

This function returned a reference into an OpenSSL datastructure, but there was no way to ensure OpenSSL would not mutate the datastructure behind ...

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

GHSA-phqj-4mhp-q6mq CVE-2026-45784 MODERATE published 2 months ago • updated about 2 hours ago

`CipherCtxRef::cipher_update_inplace` incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap...

Use after free in openssl

GHSA-xjxc-vfw2-cg96 CVE-2018-20997 CRITICAL published almost 5 years ago • updated about 1 month ago

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

openssl's `MemBio::get_buf` has undefined behavior with empty buffers

GHSA-q445-7m23-qrmw MODERATE published about 2 years ago • updated 4 months ago

Previously, `MemBio::get_buf` called `slice::from_raw_parts` with a null-pointer, which violates the functions invariants, leading to undefined beh...

rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check

GHSA-ghm9-cr32-g9qj CVE-2026-41681 HIGH published 3 months ago • updated about 2 hours ago

`EVP_DigestFinal()` always writes `EVP_MD_CTX_size(ctx)` to the `out` buffer. If `out` is smaller than that, `MdCtxRef::digest_final()` writes past...

View all 18 advisories

Recent PRs

RSS Feed

chore(deps): bump the cargo-minor-patch group with 29 updates

gotempsh/temps #218

0.10.80 → 0.10.81 Patch PR

Open 22 days ago 2 comments

chore(deps): bump the cargo group across 1 directory with 17 updates

jabari-max/rig #3

0.10.71 → 0.10.81 Patch PR

Open 25 days ago 2 comments

chore(deps): bump the cargo-minor-patch group across 1 directory with 10 updates

192d-Wing/usg-tacacs #48

0.10.80 → 0.10.81 Patch PR

Closed about 1 month ago 1 comment

Bump the cargo group across 1 directory with 2 updates

vzwjustin/cc-switch #7

0.10.75 → 0.10.81 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 47 updates

Snenjih/Labonair #110

0.10.80 → 0.10.81 Patch PR

Closed about 1 month ago 6 comments

build(deps): bump the simple group across 1 directory with 12 updates

sjwiesman/materialize #558

0.10.80 → 0.10.81 Patch PR

Open about 1 month ago 1 comment

deps(deps): bump the cargo-minor-patch group across 1 directory with 8 updates

lu149e/system #60

0.10.76 → 0.10.81 Patch PR

Open about 1 month ago 1 comment

chore(deps): Bump the cargo-minor-patch group with 12 updates

llmrails/llmrails #54

0.10.80 → 0.10.81 Patch PR

Open about 1 month ago 1 comment

build(deps): bump the minor group across 1 directory with 4 updates

coreos/rpm-ostree #5611

0.10.80 → 0.10.81 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump openssl from 0.10.79 to 0.10.80 in /code/backend

smokeythebandit/Kubarr #110

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump the rust-dependencies group across 1 directory with 15 updates

ADHIL007/codemem-server-v2 #3

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump the cargo group across 2 directories with 2 updates

Solizardking/OpenClawd #2

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the cargo group across 1 directory with 2 updates

Fldicoahkiin/SteamCloudFileManager #33

0.10.78 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump the all group across 1 directory with 13 updates

fat-fred/govee2mqtt-2fa #13

0.10.76 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump the cargo group across 1 directory with 6 updates

floneum/kalosm #443

0.10.76 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump openssl from 0.10.76 to 0.10.80

laminardb/laminardb #410

0.10.76 → 0.10.80 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the all-dependencies group across 1 directory with 164 updates

yamashita-spce/WuppieFuzz #14

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 1 comment

chore(deps): Bump the patches group across 1 directory with 50 updates

test-platform-spec/vector #16

0.10.73 → 0.10.80 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the cargo group across 1 directory with 2 updates

KooshaPari/HexaKit #163

0.10.79 → 0.10.80 Patch PR

Open about 2 months ago 4 comments

build(deps): bump the simple2 group across 1 directory with 17 updates

pH14/materialize #302

0.10.76 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the cargo group across 1 directory with 2 updates

pathharper/github-dotfiles #67

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 4 updates

jmunar/myapps #98

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump the cargo group across 1 directory with 7 updates

EmilynnJ/openfang #1

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 4 comments

Bump openssl from 0.10.79 to 0.10.80 in the cargo group across 1 directory

noClaps/cite #1

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump openssl from 0.10.78 to 0.10.80

this-rs/project-orchestrator #303

0.10.78 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump openssl from 0.10.79 to 0.10.80

AIWander/AI-Hands #1

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump openssl from 0.10.79 to 0.10.80

microsoft/litebox #875

0.10.79 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

cargo(deps): Bump openssl from 0.10.76 to 0.10.80

hiboma/entraws #29

0.10.76 → 0.10.80 Patch PR

Open about 2 months ago 1 comment

chore(backend)(deps): bump openssl from 0.10.79 to 0.10.80 in /backend-rust

thehfhotel/loyalty-app #251

0.10.79 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump openssl from 0.10.75 to 0.10.80 in /sheri-ml/codex-rs

Hey-Salad/OpenCTO #766

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 24 comments

build(deps): bump openssl from 0.10.75 to 0.10.80 in /backend

Sherlock999xxx/mcpx #8

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump openssl from 0.10.75 to 0.10.80

earth-sol/iggy #44

0.10.75 → 0.10.80 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump openssl from 0.10.73 to 0.10.80 in /cahokia

jim-hill-r/monorepo #520

0.10.73 → 0.10.80 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump openssl from 0.10.79 to 0.10.80

F4CTE/polyforge-sdk-rust #307

0.10.79 → 0.10.80 Patch PR

Open about 2 months ago 28 comments

chore(deps): bump openssl from 0.10.79 to 0.10.80 in the cargo group across 1 directory

rafaelfiguereod-stack/openhuman #5

0.10.79 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

Bump openssl from 0.10.78 to 0.10.80 in the cargo group across 1 directory

oa-root/burn #2

0.10.78 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

deps: bump openssl from 0.10.76 to 0.10.80

tphakala/rust-birdnet-onnx #83

0.10.76 → 0.10.80 Patch PR

Open about 2 months ago 1 comment

Bump openssl from 0.10.75 to 0.10.80

Sherlock999xxx/mcp_linux_ssh #5

0.10.75 → 0.10.80 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump openssl from 0.10.76 to 0.10.80 in /src-tauri

Nurkan1/IdeaBlast_Companion #10

0.10.76 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the cargo group across 2 directories with 14 updates

Shakacro/solana #9

0.10.64 → 0.10.80 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump openssl from 0.10.75 to 0.10.80

EspressoSystems/kona-celo-fork #27

0.10.75 → 0.10.80 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the cargo group across 5 directories with 4 updates

Aarogaming/aaroneous #5

0.10.79 → 0.10.80 Patch PR

Closed 2 months ago 1 comment

Bump openssl from 0.10.79 to 0.10.80 in /tools/ci-build/sdk-lints

smithy-lang/smithy-rs #4680

0.10.79 → 0.10.80 Patch PR

Open 2 months ago 1 comment

Bump the all-dependencies group with 60 updates

istio/ztunnel #1926

0.10.72 → 0.10.80 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump openssl from 0.10.78 to 0.10.80 in /tests/loadtest in the cargo group across 1 directory

openstack-experimental/keystone #732

0.10.78 → 0.10.80 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the patches group across 1 directory with 10 updates

MorningSong/vector #688

0.10.79 → 0.10.80 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump the validation-deps group across 1 directory with 10 updates

RustCrypto/rustls-rustcrypto #219

0.10.79 → 0.10.80 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump openssl from 0.10.78 to 0.10.80 in /src-tauri

Sherlock999xxx/claude-code-tool-manager #10

0.10.78 → 0.10.80 Patch PR

Open 2 months ago 2 comments

Bump openssl from 0.10.72 to 0.10.80

bngo92/mybops #31

0.10.72 → 0.10.80 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the simple2 group across 1 directory with 14 updates

antithesishq/materialize-poc #87

0.10.79 → 0.10.80 Patch PR

Closed 2 months ago 2 comments

Package Details

Name:	`openssl`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/openssl`
JSON API:	View JSON

Security Advisories

18

Active advisories

CRITICAL 1

HIGH 8

MODERATE 8

LOW 1

View All cargo Advisories

Package Information

Description:

OpenSSL bindings

Repository:	https://github.com/sfackler/rust-openssl
Latest Release:	`0.10.73` about 1 year ago
Dependent Repos:	28,271
Dependent Packages:	1,425
Downloads:	170,810,544
Ranking:	Top 0.1298% by dependent repos Top 0.1234% by downloads Top 0.0508% by dependent pkgs

PR Status

Open 676 (38.2%)

Merged 218 (12.3%)

Closed 723 (40.8%)

PR Types

Patch 1,617 (91.4%)